/Patent Tracker
AmazonGranted patentSecurity & privacyInterest 7/10

Amazon patents camera encryption that cuts cloud access

Amazon describes a system that uses a specific tree structure to encrypt video from cameras. This setup allows users to remove cloud servers from the encryption process, ensuring only the camera and the user's device can view the footage.

Why it mattersThis is interesting for smart home users who want to ensure their camera footage is not accessible to Amazon's servers.

In the filing’s own words

A system configured to improve encryption architecture for camera video data. By using an unbalanced binary tree architecture, the system enables group encryption that prioritizes a constrained device (e.g., embedded camera device), thereby reducing an amount of processing required for the constrained device to encrypt video data. For example, placing the constrained device near the root of the unbalanced binary tree offloads processing from the constrained device to other group members. At each device operating as a member of the group, a privacy enforcement policy operates to authorize/authenticate messages, using time-sensitive encryption keys that enable refined control over decrypted content. In some examples, the architecture can enable end-to-end encryption by removing any cloud services from the group. Alternatively, the architecture can include a cloud service with high or low privileges, enabling refined control over decrypted content while providing additional functionality.

What exactly they claim (claim 1)

1. A computer-implemented method comprising: storing, at a first user device, binary tree data representing a binary ratchet tree where each leaf node represents a member of a first group associated with a first camera device; displaying, on an electronic display of the first user device, a graphical user interface including one or more interface elements prompting a user to enable end to end encryption for the first camera device, wherein enabling end to end encryption causes removal of cloud services from the first group; receiving, at the first user device, user input indicating to enable end to end encryption for the first camera device; in response to the receiving of the user input indicating to enable end to end encryption for the first camera device, sending a first message from the first user device to a remote system; based on the first message: determining, at the remote system, that a first user profile is authorized to remove members from the first group, and sending, from the remote system to the first camera device, an indication to remove a first node from the binary ratchet tree, the first node corresponding to a cloud service; modifying, at the first user device, the binary tree data to remove the first node from the binary ratchet tree; following removal of the first node from the binary ratchet tree, determining, at the first user device, an updated node secret corresponding to a root node of the binary ratchet tree; receiving, at the remote system from the first camera device, encrypted first image data encrypted using a key determined based on the updated node secret corresponding to the root node of the binary ratchet tree; and sending the encrypted first image data to the first user device.

Facts

Company
Amazon (Amazon Technologies, Inc.)
Official title
Group encryption using unbalanced binary tree architecture
Patent number
US12732348B1
Application number
18622041
Filed
Mar 29, 2024
Granted
Sep 8, 2026
Inventors
3
Claims
20

Classified under

H04L 9/0833 Electricity & electronicsH04L 63/0428 Electricity & electronicsH04L 63/102 Electricity & electronicsH04L 63/104 Electricity & electronics
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Amazon in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.